Subject: 3835
Posted: 24 June 2004 at 10:02pm
Mistery solved. Schwabs is using different email addresses in the MAIL FROM command and the "From:" email header. Take a closer look at the relevant log entries below. SpamFilter reports the "1000240d9b50300018501b@bounce.quris.net" address at first since that is what was specified in the MAIL FROM command. The email headers and body is not received yet at this point, so that's all that SpamFilter can log. When the email contents is actually sent, SpamFilter is now able to read the "From:" header, and that one contains "SchwabAlerts.MarketUpdates@schwab.com". This new address is thus used from now on in the logs, thus the confusion.
Roberto F.
LogSat Software
06/23/04 13:00:23:296 -- (2780) Connection from: 66.179.26.105 - Originating country : United States
06/23/04 13:00:23:687 -- (2780) Resolving 66.179.26.105 - email09.quris.netemail09a.quris.net
06/23/04 13:00:23:687 -- (2780) Bypassed all rules for: user@user.com from 1000240d9b50300018501b@bounce.quris.net
06/23/04 13:00:24:078 -- (2780) EMail from 1000240d9b50300018501b@bounce.quris.net to user@user.com was queued. Size: 33 KB
06/23/04 13:00:24:109 -- (2452) Sending email from SchwabAlerts.MarketUpdates@schwab.com to user@user.com
06/23/04 13:00:24:453 -- (2452) EMail from SchwabAlerts.MarketUpdates@schwab.com to user@user.com was forwarded to 10.40.8.128:26
06/23/04 14:46:11:890 -- (2248) Connection from: 66.179.26.98 - Originating country : United States
06/23/04 14:46:12:296 -- (2248) Resolving 66.179.26.98 - email02.quris.net
06/23/04 14:46:12:296 -- (2248) Bypassed all rules for: user@user.com from 1007040d9a04700045103b@bounce.quris.net
06/23/04 14:46:12:578 -- (2248) EMail from 1007040d9a04700045103b@bounce.quris.net to user@user.com was queued. Size: 33 KB
06/23/04 14:46:12:593 -- (2508) Sending email from SchwabAlerts.MutualFunds@Schwab.com to user@user.com
06/23/04 14:46:12:640 -- (2248) Disconnect
06/23/04 14:46:12:765 -- (2508) EMail from SchwabAlerts.MutualFunds@Schwab.com to user@user.com was forwarded to 10.40.8.128:26
06/23/04 19:15:08:828 -- (2340) Connection from: 66.179.26.106 - Originating country : United States
06/23/04 19:15:09:171 -- (2340) Resolving 66.179.26.106 - email10a.quris.netemail10.quris.net
06/23/04 19:15:09:171 -- (2340) Bypassed all rules for: user@user.com from 1006240da076200086328b@bounce.quris.net
06/23/04 19:15:09:500 -- (2340) EMail from 1006240da076200086328b@bounce.quris.net to user@user.com was queued. Size: 26 KB
06/23/04 19:15:09:531 -- (2876) Sending email from SchwabAlerts.MyPortfolio@Schwab.com to user@user.com
06/23/04 19:15:09:640 -- (2340) Disconnect
06/23/04 19:15:09:703 -- (2876) EMail from SchwabAlerts.MyPortfolio@Schwab.com to user@user.com was forwarded to 10.40.8.128:26
